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-- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )[3 Responsive to connmunication(s) filed on 19 September 2000 . 
2a)n This action is FINAL. 2b)ISl This action is non-final. 

3) n Since this application is in condition for allowance except for fomrial matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) [3 Claim(s) 1-17 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) 13 Claim(s) 1-17 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on 9/19/200 is/are: a)[3 accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action orfomn PTO-152. 

Priority under 35 U.S.C. § 119 

12) 13 Acknowledgment is made of a claim for foreign priority under 35 U.S.C, § 119(a)-(d) or (f). 
a)[3 All b)n Some * c)D None of: 

1 M Certified copies of the priority documents have been received. 

20 Certified copies of the priority documents have been received in Application No. . 



3.n Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



Claim Rejections - 35 USC §112 



1 . The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

2. Claims 1, 5-9. 11-12, 14-16 are rejected under 35 U.S.C. 112, second paragraph, 
as being indefinite for failing to particularly point out and distinctly claim the subject 
matter which applicant regards as the invention. The examiner notes each of the 
aforementioned claims contains reference numbers pertaining to the drawings. It is 
unclear whether the reference numbers contained in the claims are intended to 
specifically limit the claim or provide a general reference for illustration purposes. 

3. Claims 2, 3, and 13 are rejected under 35 U.S.C. 112, second paragraph, as 
being dependant on a rejected base claim. 



1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1, 3, 6, 8-13, 15-17 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Narasimhalu in view of Atkinson (U.S. Patent No. 5892904). In 
regards to claims 1, 9, and 10, Narasimhalu discloses a design that pertains to a 
method of verifying and validating the trustworthiness (guarantee it is virus-free, see 
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column 5, line 21 ) of data objects (i.e. files). Narasimhalu further discloses in column 4, 
lines 47-50 that a request for a certificate for an object is made by an information 
provider to a certification authority. This disclosure meets the first limitation set forth 
under claims 1 , 9 and 10, which call for receiving a virus-free certificate request for a file 
from a system. Narasimhalu then goes on to disclose in column 5, lines 21-25 that the 
certifying authority is responsible for certifying objects meeting the defined trust criteria 
(i.e. is the object/file virus-free). This disclosure meets the limitations set forth under 
claims 1 , 9 and 10, which call for determining whether the file is virus-free and certifying 
that the file is virus-free by issuing a certificate. Narasimhalu finally discloses in column 
6, lines 35-41 that in response to receiving a certificate request, the certifying authority 
generates and sends a certificate back to the requesting information provider. This 
disclosure meets the limitation set forth under claims 1, 9 and 10, which call for sending 
back, in response to the virus-free certificate request, a virus-free certificate. However, 
Narasimhalu makes no mention of allowing the virus-free certificate to contain a file 
signature. Atkinson teaches in column 1, lines 48-52 that wide-spread distribution of 
executable files over open networks are at an increased risk of contracting computer 
viruses or other malicious code. Atkinson then discloses in column 2, lines 34-43 that in 
order to transfer a file over a communicafions network with confidence the file is signed 
to form a file signature. It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to substitute Atkinson's teachings and disclosures on 
creating a file signature into Narasimhalu's design in order to achieve a design that is 
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capable of allowing the virus-free certificate to contain a file signature for the purposes 
of further reducing the risk that files become corrupted during transit. 

3. In regards to claim 3, Narasimhalu further discloses in column 6, lines 32-34 that 
the information provider prepares a certificate request for a given distribution package 
(i.e. a file or other object) and sends it to the certifying authority. This disclosure meets 
the limitations set forth under claim 3, which call for have the certificate request specify 
a file for which a virus-free certificate is requested. 

4. In regards to claims 6 and 15, Narasimhalu discloses in column 7, lines 28-36 
that the certificate (indicating that an object/file is trustworthy) generated by the 
certification authority consists of a certificate body and the certificate authority signature 
(which is validated using the certificate authority's public key). It is also disclosed in the 
aforementioned location that the certificate body contains information relating to the 
certificate authority's identity, a time stamp for determining the validity of the certificate 
and a copy of the information contained in the certificate request, which includes and 
indication of an object (i.e. file) the certificate is being requested for. This disclosure 
meets the limitations set forth under claims 6 and 15, which call for the certificate to 
comprise a file identification, a virus-free certificate authority identification, a certificate 
signature for authenticating the virus-free certificate and an indication of the virus-free 
certificate validity. However, Narasimhalu's design makes no mention of allowing the 
virus-free certificate to contain a public key for decrypting the file signature. Atkinson 
teaches in column 1 , lines 48-52 that wide-spread distribution of executable files over 
open networks are at an increased risk of contracting computer viruses or other 
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malicious code. Atkinson then discloses in column 2, lines 58-60 that the signature with 
which the file is signed with is formed using a public-private key signature algorithm 
such as the RSA public key cipher, is well known in the art. It would have been obvious 
to one of ordinary skill in the art at the time the invention was made to substitute 
Atkinson's teachings on how using public key ciphers for generating signatures are well 
known in the art into Narasimhalu's design in order to achieve a design that is capable 
of allowing the virus-free certificate to contain a public key for use in decrypting the file 
signature. 

5. In regards to claim 8, Narasimhalu's design disclosed above meets all of the 
aforementioned limitations set forth under claim 1 . However, Narasimhalu's design 
makes no mention of hashing the file to generate a file digest and encrypting the file 
digest using a private key. Atkinson discloses a in column 1 , lines 48-52 that wide- 
spread distribution of executable files over open networks are at an increased risk of 
contracting computer viruses or other malicious code. Atkinson then discloses in 
column 2, lines 53-60 a method of generating a file signature that involves determining 
a cryptographic hash or digest of the file, which is then protected with a public-private 
key signature algorithm. It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to substitute Atkinson's teaching on the need for 
reducing the risk of contacting computer viruses for files transmitted over open networks 
along with Atkinson's disclosure of creating a cryptographic file digest in order to 
achieve a design that is capable of generating a file signature by hashing the file and 
forming a digest which would then be encrypted using a private key. 
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6. In regards to clainns 11,16 and 17, Narasimhalu discloses a design in column 2, 
lines 35-42 in which a certificate (for certifying the trustworthiness of an object) is 
generated for a particular distribution package (i.e. file). It is also disclosed in the 
aforementioned location that the certificate body contains the name of the distributor 
package (file), indicating the association with a particular data package (file). This 
disclosure meets the limitations set forth under claims 11,16 and 17 that call for 
determining a file that the virus-free certificate is associated with. Narasimhalu further 
discloses in column 8, lines 18-22 and in figure 2 that a certificate signature is contained 
in the certificate and is used to authenticate the signature. This disclosure meets the 
exact limitations set forth under claims 11, 16 and 17 that call for authenticating the 
virus-free certificate through the use of a certificate signature. However, Narasimhalu's 
design makes no mention of authenticating the file by allowing the virus-free certificate 
to contain a file signature for verifying the files authenticity. Atkinson teaches in column 
1 , lines 48-52 that wide-spread distribution of executable files over open networks are at 
an increased risk of contracting computer viruses or other malicious code. Atkinson 
then discloses in column 2, lines 34-43 that in order to transfer a file over a 
communications network with confidence the file is signed to form a file signature. It 
would have been obvious to one of ordinary skill in the art at the time the invention was 
made to substitute Atkinson's teachings and disclosures on creating a file signature into 
Narasimhalu's design in order to achieve a design that is capable of allowing the virus- 
free certificate to contain a file signature for the purposes of further reducing the risk 
that files become corrupted during transit. 
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7. In regards to claim 12, Narasimhalu and Atkinson's design disclosed above 
meets all of the aforementioned limitations set forth under claim 1 1 . The combination of 
Narasimhalu and Atkinson further disclose the limitations set forth under claim 12, which 
call for decrypting the file signature using a public key contained in the virus-free 
certificate, hashing the file to generate a file digest and comparing the file digest to the 
decrypted file signature. Atkinson discloses in column 2, lines 58-60 that the signature 
with which the file is signed with is formed using a public-private key pair signature 
algorithm such as the RSA public key cipher, is well known in the art. Atkinson further 
discloses in column 2, lines 53-60 a method of generating a file signature that involves 
determining a cryptographic hash or digest of the file, which is then protected with the 
aforementioned public-private key signature algorithm. It would have been obvious to 
one of ordinary skill in the art at the time the invention was made to combine Atkinson's 
teachings and disclosures on the use of public keys and file signatures into the 
Narasimhalu-Atkinson combination in order to achieve a design that is capable of 
allowing a file signature to be decrypted with a public key and then compared with a file 
digest to ensure the integrity and authenticity of the file. 

8. In regards to claim 13, Narasimhalu further discloses in figure 2 that once the 
certificate is generated it is then verified to determine its authenticity. This disclosure 
meets the exact limitations set forth under claim 13 that call for validating the virus-free 
certificate. 



9. Claims 2, 4, and 5 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Narasimhalu and Atkinson as applied to claim 1 above and in further view of the 
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"Virus Bulletin" publication. In regards to claim 2, Narasimhalu and Atkinson's design 
disclosed above meets all of the aforementioned limitations set forth under claim 1 . 
However, Narasimhalu and Atkinson's design makes no mention of allowing the virus- 
free certificate request to contain a list of one or a plurality of anti-virus programs to 
execute on the file to determine whether the file is virus-free or not. The "Virus Bulletin" 
publication discloses on page 12, under the heading "using just one anti-virus product" 
that the advantages of using multiple virus scanners outweighs the consequences of 
insufficient protection and that there are obvious benefits of using more than one 
scanning product such as providing a finer net that most computer viruses would be 
unable to penetrate. It would have been obvious to one of ordinary skill in the art at the 
time the invention was made to substitute the teachings disclosed in the "Virus Bulletin" 
publication into Narasimhalu and Atkinson's design in order to achieve a design that is 
capable of allowing the virus-free certificate request to contain a list of one or a plurality 
of anti-virus programs to execute on a file for the purpose of providing a finer virus 
detection net. 

10. In regards to claim 4, Narasimhalu and Atkinson's design disclosed above meets 
all of the aforementioned limitations set forth under claim 1 . However, Narasimhalu and 
Atkinson's design makes no mention of executing one or a plurality of anti-virus 
programs for detecting viruses. The "Virus Bulletin" publication discloses on page 12, 
under the heading "using just one anti-virus product" that the advantages of using 
multiple virus scanners outweighs the consequences of insufficient protection and that 
there are obvious benefits of using more than one scanning product such as providing a 
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finer net that most computer viruses would be unable to penetrate. It would have been 
obvious to one of ordinary skill in the art at the time the invention was made to 
substitute the teachings disclosed in the "Virus Bulletin" publication into Narasimhalu 
and Atkinson's design in order to achieve a design that is capable of allowing one or a 
plurality of anti-virus programs to be executed. 

11. In regards to claim 5, Narasimhalu and Atkinson's design disclosed above meets 
all of the aforementioned limitations set forth under claim 1 . However, Narasimhalu and 
Atkinson's design makes no mention of allowing the virus-free certificate request to 
contain a list of one or a plurality of anti-virus programs that have been executed on the 
file to determine whether the file is virus-free or not. The "Virus Bulletin" publication 
discloses on page 12, under the heading "using just one anti-virus product" that the 
advantages of using multiple virus scanners outweighs the consequences of insufficient 
protection and that there are obvious benefits of using more than one scanning product 
such as providing a finer net that most computer viruses would be unable to penetrate. 
It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to substitute the teachings disclosed in the "Virus Bulletin" publication into 
Narasimhalu and Atkinson's teachings in order to achieve a design that is capable of 
allowing the virus-free certificate request to contain a list of one or a plurality of anti- 
virus programs that have been executed on a file for the purpose of determining what 
anti-virus programs were used in order to provide a finer virus detection net. 
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12. Claims 7 and 14 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Narasimhalu and Atkinson as applied to claim 1 above and in further view of Muftic 
(U.S. Patent No. 5745574). In regards to claim 7, Narasimhalu further discloses in 
column 6, lines 42-46 that the certificate can be stored in a database along with the 
package (i.e. file) that it certifies. This disclosure meets the limitations set forth under 
claim 7 that call for identifying the system where the file and associated virus-free 
certificate are stored. However, Narasimhalu and Atkinson's design makes no mention 
of downloading updates of the virus-free certificate. Muftic discloses a design that 
pertains to public key based secure communication systems involving the use of 
certificates. Muftic then goes on to disclose in column 7, lines 21-41 a method directed 
towards updating certificates. It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to substitute Muftic's design related to updating 
certificates into Narasimhalu and Atkinson's design in order to achieve a design that is 
capable of allowing certificates to be updated for the purposes of ensuring that the 
certificates remain current as well as for obtaining valid certificates. 

13. In regards to claim 14, Narasimhalu further discloses in column 8, lines 28-50 
that a certificate is verified as valid only when it meets all of the checks. This disclosure 
meets the limitation set forth under claim 14 that calls for determining whether the virus- 
free certificate is valid or not. However, Narasimhalu's design makes no mention of 
requesting an updated certificate if the current certificate is not valid. Muftic discloses a 
design that pertains to public key based secure communication systems involving the 
use of certificates. Muftic then goes on to disclose in column 7, lines 21-41 a method 
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directed towards updating certificates. It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to substitute Muftic's design related to 
updating certificates into Narasimhalu and Atkinson's design in order to achieve a 
design that is capable of allowing certificates to be updated for the purposes of ensuring 
that the certificates remain current as well as for obtaining valid certificates. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Joseph McArdle whose telephone number is (703) 305- 
7515. The examiner can normally be reached on Weekdays from 8:00 am - 5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). I 
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